What is claimed is : 




1. A small footprint device comprising; 

a. at leatet one processing element; 

b. memory, 

c. a context barrier using said memory for isolating 
program modules fronk one another; and 

d. a global datsa structure for permitting one 
program module to accessv information from another program 
module across said context barrier. 



2. The small footprint device of claim 1 in which 
said context barrier allocates separate name spaces for 
each program module . 



3 . The small footprint device of claim 2 in which 



at least two program modu; 
structure even though tjie} 
respective name spaces. 



an access said global data 
are located in different 



4. The small footprint aevice of claim 1 in which 
said context barrier allocates Separate memory spaces for 
each program module. 
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5 . The small\ footprint device of claim 4 in which 
at least two program modules can access said global data 
structure even though they are located in different 
respective memory splaces . 

6 . The small f obtprint device of claim 1 in which 
said context barrier enforces security checks on at least 
one of a principal, am object and an action. 

7. The small footprint device of claim 6 in which 
at least one security aheck is based on partial name 
agreement between a principal and an object. 

8 . The small f ootpriVAt device of claim 7 in which 
at least one program cap access said global data 
structure without said at least one security check. 

9. The small footprint! device of claim 6 in which 
at least one security check \ is based on memory space 
agreement between a principal! and an object. 

10. The small footprint device of claim 9 in which 
at least one program can access \a global data structure 
without said at least one security check. 
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11. A method of \ operating a small footprint device, 
comprising the step o\f separating program modules using 
a context barrier and! permitting access to information 
across the context \ barrier using an global data 
structure . 

12 . The method ok claim 11 in which the context 
barrier will not permit k principal to perform an action 
on an object unless both principal and object are part of 
the same context unless t\he request is for access to a 
global data structure. 

13 . A method of permitting access to information on 
a small footprint device fjaQm a first program module to 
a second program module aepkr&ted by a context barrier, 
comprising the step of crVai/rlg a global data structure 
which may be accessed by at VLeast two program modules. 

14 . The method of claim 13 in which said program 
modules is in respective contexts and said global data 
structure is part of a supercontext . 

15. A method of communicating across a context 
barrier separating program module^ on a small footprint 
device, comprising the steps of 

a. creating a global data strufctiure; 

January 22, 1999 50253-219; P3711 



34 



b. permitting at least one program module to write 
information to said global data structure; and 

c . having at least one other program module read 
information from said global data structure. 



16. A computer program product, comprising: 

a. a memory medium; and 

b. a computer controlling element comprising 
instructions for Implementing a context barrier on a 
small footprint device and for bypassing said context 
barrier using a glottal data structure. 

17. The computer program product of claim 16 in 
which said medium is a carrier wave. 
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18. A computer /program product, comprising: 



a . a memory medr* 



;pd 



b. a computer controlling element comprising 
instructions for separating a plurality of programs on a 
small footprint device bv running them in respective 
contexts and for permitting one program to access 
information from another prqgram by way of a global data 
structure . 



19. The computer program product of claim 18 in 
which said medium is a carried wave . 
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20. A carrier wave carrying instructions for 
implementing a global data structure for bypassing a 
context barrier onl a small footprint device over a 
communicat ions 1 ink .1 

21. A carrier Wave carrying instructions over a 
communications link \for separating a plurality of 
programs on a small footprint device by running them in 
respective contexts ana for permitting one program to 
access information fron^^nother program using at least 
one global data struct 

22. A method of transmitting code over a network, 
comprising the step of transmitting a block of code from 
a server, said block of code comprising instructions for 
implementing a global data structure for bypassing a 
context barrier on a smaJ^l footprint device over a 
communi cat ions 1 ink , 
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